Lucene search

WpvulndbWPVDB-ID:45F72329-2A87-4305-AE85-76635F433EC2

HistoryApr 17, 2024 - 12:00 a.m.

Ovic Addon Toolkit <= 2.6.1 - Missing Authorization

2024-04-1700:00:00

wpscan.com

wordpress

vulnerability

unauthorized access

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

AI Score

6.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Description The Ovic Addon Toolkit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.6.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

References

www.wordfence.com/threat-intel/vulnerabilities/id/96deac16-cb64-4246-b8d0-05a020142f1d

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

AI Score

6.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for WPVDB-ID:45F72329-2A87-4305-AE85-76635F433EC2